mbess/monakhos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Activity

feat: various update to install work pro laptop

Browse source
This commit is contained in:
Matthieu Bessat 2024-07-03 18:03:08 +02:00
parent 4801f7bd38
commit a513f7abd8
10 changed files with 85 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/ansible.cfg
View file

@ -1,5 +1,4 @@
[defaults]
remote_user = root
#nocows = True
gathering = smart
fact_caching = jsonfile

24
ansible/arch_packages.yaml
View file

@ -1,8 +1,6 @@
categories:
base:
- util-linux
- man-pages
- man-db
- less
- git
- tmux
@ -13,6 +11,8 @@ categories:
desc: The best to connect to remote server!
- name: python-pipx
desc: To install python stuff
- name: pacman-contrib
desc: Include pactree
libs:
- protobuf
@ -35,6 +35,8 @@ categories:
network:
- sshfs
- unbound
- networkmanager-openvpn
- openfortivpn
keymap:
- aur/xkb-qwerty-fr
@ -48,13 +50,20 @@ categories:
_:
- bat
- plantuml
- tldr
- desc: Env loader, export env variables from dotenv file in shell scripts
name: aur/zenv
backup:
- borg
docs:
- man-pages
- man-db
- tldr
- zeal
finder:
- fzf
- ripgrep
- fd
- exa
unix:
- moreutils
- rlwrap
@ -144,6 +153,8 @@ categories:
# httrack https://www.kali.org/tools/httrack/
fs:
- lsof
- name: ncdu
desc: Disk usage explorer
tui:
browser:
- w3m
@ -177,8 +188,9 @@ categories:
- qrencode
- newsboat
security:
password:
- gopass
- pass
virtualization:
- qemu-base
@ -199,6 +211,7 @@ categories:
- aur/litecli
editor:
- vim
- neovim
- helix
c:
- gcc
@ -243,8 +256,7 @@ categories:
- zoxide
- name: dash
desc: Simple POSIX compliant shell
- name: aur/shellcheck-bin
- name: shellcheck
desc: Static analyzer for shell script
audio:

271
ansible/archinstall_configs/user_configuration.json
View file

@ -1,271 +0,0 @@
{
"additional-repositories": [
"multilib"
],
"archinstall-language": "English",
"audio_config": {
"audio": "pipewire"
},
"bootloader": "Grub",
"config_version": "2.8.0",
"debug": false,
"disk_config": {
"config_type": "default_layout",
"device_modifications": [
{
"device": "/dev/sda",
"partitions": [
{
"btrfs": [],
"dev_path": null,
"flags": [
"Boot"
],
"fs_type": "fat32",
"mount_options": [],
"mountpoint": "/boot",
"obj_id": "b2d597c1-f6ad-4314-8b08-2c27bbf43fc1",
"size": {
"sector_size": {
"unit": "B",
"value": 512
},
"unit": "MiB",
"value": 203
},
"start": {
"sector_size": {
"unit": "B",
"value": 512
},
"unit": "MiB",
"value": 3
},
"status": "create",
"type": "primary"
},
{
"btrfs": [],
"dev_path": null,
"flags": [],
"fs_type": "ext4",
"mount_options": [],
"mountpoint": "/",
"obj_id": "04f15d18-170d-403b-92cf-62a6c67f2199",
"size": {
"sector_size": {
"unit": "B",
"value": 512
},
"unit": "B",
"value": 10521411584
},
"start": {
"sector_size": {
"unit": "B",
"value": 512
},
"unit": "B",
"value": 216006656
},
"status": "create",
"type": "primary"
}
],
"wipe": true
}
]
},
"disk_encryption": null,
"hostname": "archlinux",
"kernels": [
"linux"
],
"locale_config": {
"kb_layout": "us",
"sys_enc": "UTF-8",
"sys_lang": "en_US"
},
"mirror_config": {
"custom_mirrors": [],
"mirror_regions": {
"Belgium": [
"http://mirror.tiguinet.net/arch/$repo/os/$arch",
"http://archlinux.mirror.kangaroot.net/$repo/os/$arch",
"http://archlinux.cu.be/$repo/os/$arch"
],
"France": [
"https://mirrors.jtremesay.org/archlinux/$repo/os/$arch",
"https://mirrors.gandi.net/archlinux/$repo/os/$arch",
"https://mirrors.eric.ovh/arch/$repo/os/$arch",
"https://mirrors.celianvdb.fr/archlinux/$repo/os/$arch",
"https://mirror.wormhole.eu/archlinux/$repo/os/$arch",
"https://mirror.theo546.fr/archlinux/$repo/os/$arch",
"https://mirror.thekinrar.fr/archlinux/$repo/os/$arch",
"https://mirror.oldsql.cc/archlinux/$repo/os/$arch",
"https://mirror.its-tps.fr/archlinux/$repo/os/$arch",
"https://mirror.ibakerserver.pt/Arch/$repo/os/$arch",
"https://mirror.cyberbits.eu/archlinux/$repo/os/$arch",
"https://archlinux.mirrors.ovh.net/archlinux/$repo/os/$arch",
"https://archlinux.mailtunnel.eu/$repo/os/$arch",
"https://arch.yourlabs.org/$repo/os/$arch",
"http://mirrors.standaloneinstaller.com/archlinux/$repo/os/$arch",
"http://mirrors.gandi.net/archlinux/$repo/os/$arch",
"http://mirrors.celianvdb.fr/archlinux/$repo/os/$arch",
"http://mirror.theo546.fr/archlinux/$repo/os/$arch",
"http://mirror.oldsql.cc/archlinux/$repo/os/$arch",
"http://mirror.lastmikoi.net/archlinux/$repo/os/$arch",
"http://mirror.its-tps.fr/archlinux/$repo/os/$arch",
"http://mirror.cyberbits.eu/archlinux/$repo/os/$arch",
"http://mirror.archlinux.ikoula.com/archlinux/$repo/os/$arch",
"http://mir.archlinux.fr/$repo/os/$arch",
"http://ftp.u-strasbg.fr/linux/distributions/archlinux/$repo/os/$arch",
"http://archlinux.mirrors.ovh.net/archlinux/$repo/os/$arch",
"http://archlinux.mailtunnel.eu/$repo/os/$arch",
"http://archlinux.datagr.am/$repo/os/$arch",
"http://arch.yourlabs.org/$repo/os/$arch"
],
"Germany": [
"https://pkg.fef.moe/archlinux/$repo/os/$arch",
"https://packages.oth-regensburg.de/archlinux/$repo/os/$arch",
"https://os.codefionn.eu/archlinux/$repo/os/$arch",
"https://mirrors.xtom.de/archlinux/$repo/os/$arch",
"https://mirrors.niyawe.de/archlinux/$repo/os/$arch",
"https://mirrors.n-ix.net/archlinux/$repo/os/$arch",
"https://mirrors.janbruckner.de/archlinux/$repo/os/$arch",
"https://mirror.wtnet.de/archlinux/$repo/os/$arch",
"https://mirror.ubrco.de/archlinux/$repo/os/$arch",
"https://mirror.sunred.org/archlinux/$repo/os/$arch",
"https://mirror.selfnet.de/archlinux/$repo/os/$arch",
"https://mirror.pseudoform.org/$repo/os/$arch",
"https://mirror.pagenotfound.de/archlinux/$repo/os/$arch",
"https://mirror.netcologne.de/archlinux/$repo/os/$arch",
"https://mirror.moson.org/arch/$repo/os/$arch",
"https://mirror.metalgamer.eu/archlinux/$repo/os/$arch",
"https://mirror.kumi.systems/archlinux/$repo/os/$arch",
"https://mirror.iusearchbtw.nl/$repo/os/$arch",
"https://mirror.informatik.tu-freiberg.de/arch/$repo/os/$arch",
"https://mirror.hugo-betrugo.de/archlinux/$repo/os/$arch",
"https://mirror.fra10.de.leaseweb.net/archlinux/$repo/os/$arch",
"https://mirror.f4st.host/archlinux/$repo/os/$arch",
"https://mirror.dogado.de/archlinux/$repo/os/$arch",
"https://mirror.cmt.de/archlinux/$repo/os/$arch",
"https://mirror.clientvps.com/archlinux/$repo/os/$arch",
"https://mirror.bethselamin.de/$repo/os/$arch",
"https://mirror.23m.com/archlinux/$repo/os/$arch",
"https://ftp.wrz.de/pub/archlinux/$repo/os/$arch",
"https://ftp.spline.inf.fu-berlin.de/mirrors/archlinux/$repo/os/$arch",
"https://ftp.halifax.rwth-aachen.de/archlinux/$repo/os/$arch",
"https://ftp.fau.de/archlinux/$repo/os/$arch",
"https://ftp.agdsn.de/pub/mirrors/archlinux/$repo/os/$arch",
"https://dist-mirror.fem.tu-ilmenau.de/archlinux/$repo/os/$arch",
"https://de.mirrors.cicku.me/archlinux/$repo/os/$arch",
"https://de.arch.mirror.kescher.at/$repo/os/$arch",
"https://archlinux.thaller.ws/$repo/os/$arch",
"https://archlinux.richard-neumann.de/$repo/os/$arch",
"https://archlinux.homeinfo.de/$repo/os/$arch",
"https://arch.unixpeople.org/$repo/os/$arch",
"https://arch.phinau.de/$repo/os/$arch",
"https://arch.kurdy.org/$repo/os/$arch",
"https://arch.jensgutermuth.de/$repo/os/$arch",
"http://packages.oth-regensburg.de/archlinux/$repo/os/$arch",
"http://os.codefionn.eu/archlinux/$repo/os/$arch",
"http://mirrors.xtom.de/archlinux/$repo/os/$arch",
"http://mirrors.niyawe.de/archlinux/$repo/os/$arch",
"http://mirrors.n-ix.net/archlinux/$repo/os/$arch",
"http://mirrors.janbruckner.de/archlinux/$repo/os/$arch",
"http://mirror.wtnet.de/archlinux/$repo/os/$arch",
"http://mirror.ubrco.de/archlinux/$repo/os/$arch",
"http://mirror.sunred.org/archlinux/$repo/os/$arch",
"http://mirror.selfnet.de/archlinux/$repo/os/$arch",
"http://mirror.pagenotfound.de/archlinux/$repo/os/$arch",
"http://mirror.netcologne.de/archlinux/$repo/os/$arch",
"http://mirror.moson.org/arch/$repo/os/$arch",
"http://mirror.metalgamer.eu/archlinux/$repo/os/$arch",
"http://mirror.kumi.systems/archlinux/$repo/os/$arch",
"http://mirror.informatik.tu-freiberg.de/arch/$repo/os/$arch",
"http://mirror.hugo-betrugo.de/archlinux/$repo/os/$arch",
"http://mirror.fra10.de.leaseweb.net/archlinux/$repo/os/$arch",
"http://mirror.f4st.host/archlinux/$repo/os/$arch",
"http://mirror.cmt.de/archlinux/$repo/os/$arch",
"http://mirror.clientvps.com/archlinux/$repo/os/$arch",
"http://mirror.23m.com/archlinux/$repo/os/$arch",
"http://linux.rz.rub.de/archlinux/$repo/os/$arch",
"http://ftp.wrz.de/pub/archlinux/$repo/os/$arch",
"http://ftp.uni-kl.de/pub/linux/archlinux/$repo/os/$arch",
"http://ftp.uni-hannover.de/archlinux/$repo/os/$arch",
"http://ftp.uni-bayreuth.de/linux/archlinux/$repo/os/$arch",
"http://ftp.tu-chemnitz.de/pub/linux/archlinux/$repo/os/$arch",
"http://ftp.spline.inf.fu-berlin.de/mirrors/archlinux/$repo/os/$arch",
"http://ftp.hosteurope.de/mirror/ftp.archlinux.org/$repo/os/$arch",
"http://ftp.halifax.rwth-aachen.de/archlinux/$repo/os/$arch",
"http://ftp.gwdg.de/pub/linux/archlinux/$repo/os/$arch",
"http://ftp.fau.de/archlinux/$repo/os/$arch",
"http://ftp.agdsn.de/pub/mirrors/archlinux/$repo/os/$arch",
"http://ftp-stud.hs-esslingen.de/pub/Mirrors/archlinux/$repo/os/$arch",
"http://de.mirrors.cicku.me/archlinux/$repo/os/$arch",
"http://artfiles.org/archlinux.org/$repo/os/$arch",
"http://archlinux.thaller.ws/$repo/os/$arch",
"http://archlinux.mirror.iphh.net/$repo/os/$arch",
"http://arch.phinau.de/$repo/os/$arch",
"http://arch.jensgutermuth.de/$repo/os/$arch"
],
"United Kingdom": [
"https://www.mirrorservice.org/sites/ftp.archlinux.org/$repo/os/$arch",
"https://repo.slithery.uk/$repo/os/$arch",
"https://mirrors.ukfast.co.uk/sites/archlinux.org/$repo/os/$arch",
"https://mirrors.melbourne.co.uk/archlinux/$repo/os/$arch",
"https://mirror.vinehost.net/archlinux/$repo/os/$arch",
"https://mirror.st2projects.com/archlinux/$repo/os/$arch",
"https://mirror.netweaver.uk/archlinux/$repo/os/$arch",
"https://mirror.bytemark.co.uk/archlinux/$repo/os/$arch",
"https://london.mirror.pkgbuild.com/$repo/os/$arch",
"https://lon.mirror.rackspace.com/archlinux/$repo/os/$arch",
"https://archlinux.uk.mirror.allworldit.com/archlinux/$repo/os/$arch",
"http://www.mirrorservice.org/sites/ftp.archlinux.org/$repo/os/$arch",
"http://mirrors.ukfast.co.uk/sites/archlinux.org/$repo/os/$arch",
"http://mirrors.melbourne.co.uk/archlinux/$repo/os/$arch",
"http://mirror.vinehost.net/archlinux/$repo/os/$arch",
"http://mirror.netweaver.uk/archlinux/$repo/os/$arch",
"http://mirror.bytemark.co.uk/archlinux/$repo/os/$arch",
"http://lon.mirror.rackspace.com/archlinux/$repo/os/$arch",
"http://archlinux.uk.mirror.allworldit.com/archlinux/$repo/os/$arch"
]
}
},
"network_config": {
"type": "nm"
},
"no_pkg_lookups": false,
"ntp": true,
"offline": false,
"packages": [
"less",
"python",
"openssh"
],
"parallel downloads": 0,
"profile_config": {
"gfx_driver": "All open-source",
"greeter": "ly",
"profile": {
"custom_settings": {
"Sway": {
"seat_access": "polkit"
}
},
"details": [
"Sway"
],
"main": "Desktop"
}
},
"script": "guided",
"silent": false,
"skip_ntp": false,
"skip_version_check": false,
"swap": true,
"timezone": "UTC",
"uki": false,
"version": "2.8.0"
}

10
ansible/archinstall_configs/user_credentials.json
View file

@ -1,10 +0,0 @@
{
"!root-password": "XX",
"!users": [
{
"!password": "XX",
"sudo": true,
"username": "mbess"
}
]
}

1
ansible/pip_packages.yaml
View file

@ -6,3 +6,4 @@ base:
- xkcd-pass
- azlyrics2
- yewtube
- lesspass

4
ansible/run_ansible_playbook.sh
View file

@ -1,5 +1,7 @@
#!/usr/bin/sh
set -x
workdir="$(pwd)"
base="$(realpath $(dirname "$0"))"
@ -25,5 +27,5 @@ ansible-playbook $base/workstation.yaml \
-i "inventory.yaml" \
--ssh-extra-args "-o ControlMaster=auto -o ControlPersist=60s -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -p 22 -i ./master_sshkey" \
--extra-vars "@$workdir/vars.yaml" \
$@
"$@"

2
ansible/vm_files
View file

@ -1 +1 @@
/mnt/extramedia3/mbess/workspace/monakhos/target/blackjack
/mnt/extramedia3/mbess/workspace/monakhos/target/lambdacov

49
ansible/workstation.yaml
View file

@ -11,22 +11,29 @@
params:
ssh_uri: "mbess@srv06.mbess.net:/warmd/mbess"
mount_path: "{{ home }}/.mnt/srv06/warmd/mbess"
profile: perso
- from: "mount_sshfs"
name: "mount_sshfs_srv06_warmd_etb"
enabled: true
params:
ssh_uri: "mbess@srv06.mbess.net:/warmd/etoiledebethleem"
mount_path: "{{ home }}/.mnt/srv06/warmd/etb"
profile: perso
- name: "popequer_gitwatch@"
profile: all
- name: "hourly_remainder"
enabled: true
timer: true
profile: all
- name: "cliphist"
enabled: true
profile: all
- name: "gammastep"
enabled: true
profile: all
- name: "swaybg"
enabled: true
profile: all
config_files:
- dir: fish
name: config.fish
@ -36,6 +43,8 @@
name: alacritty.toml
- dir: wofi
name: style.css
- dir: kanshi
name: config
- dir: sway
name: config
- dir: helix
@ -57,7 +66,25 @@
- file:
path: /home/mbess/.workstation_setup_state
state: touch
- copy: content="2024-05-20T11:28:07.552Z c385e8f1-9f34-47d3-9155-0cc1f04c4550" dest=/home/mbess/.workstation_setup_state
- copy:
content: "{\"monakhos\": {\"date\": \"{{ ansible_date_time.iso8601 }}\", \"name\":\"{{ device_name }}\", \"profile\":\"{{ profile }}\"}\n"
dest: "{{ home }}/.workstation_setup_state"
- become: yes
become_user: "{{ user }}"
file:
path: "{{ home }}/.monakhos_mbess"
state: touch
- name: Change hostname
hostname:
name: "{{ device_name }}"
- name: Setup ssh dir
file:
path: "{{ home }}/.ssh"
state: directory
recurse: true
owner: "{{ user }}"
- name: Update pacman repo
become: true
@ -128,6 +155,7 @@
# DOTS
- name: Clone dots file
git:
key_file: "{{ home }}/.ssh/{{ device_name }}_perso_generic_ed25519"
repo: "git@forge.lefuturiste.fr:mbess/dots.git"
dest: "{{ home }}/.dots"
@ -152,6 +180,7 @@
src: "{{ home }}/.dots/config/{{ item.dir }}/{{ item.name }}"
dest: "{{ home }}/.config/{{ item.dir }}/{{ item.name }}"
state: link
force: true
loop: "{{ config_files }}"
- name: Set default shell
@ -215,7 +244,7 @@
- name: Setup user units
loop: "{{ systemd_services.user }}"
when: "item.from is not defined"
when: "item.from is not defined and (item.profile == 'all' or item.profile == profile)"
template:
src: "systemd/user/{{ item.name }}.service"
dest: "{{ home }}/.config/systemd/user/{{ item.name }}.service"
@ -263,6 +292,7 @@
path: "{{ home }}/.mnt/{{ item }}"
state: directory
recurse: true
when: "profile == 'perso'"
loop:
- srv06/warmd/mbess
- srv06/coldd/mbess
@ -292,6 +322,16 @@
path: "{{ home }}/.cache/secrets/"
state: directory
recurse: true
- name: Setup vaults dir gpg home
file:
path: "{{ home }}/.vaults/gpg-homes"
state: directory
recurse: true
- name: Setup vaults dir store unixpass
file:
path: "{{ home }}/.vaults/pass"
state: directory
recurse: true
- name: Setup main popequer notebook
include_role:
@ -314,6 +354,7 @@
ansible.builtin.git:
repo: "git@forge.lefuturiste.fr:mbess/books-sources.git"
dest: /home/mbess/workspace/books_sources
when: "profile == 'perso'"
- name: Clone snippets space
ansible.builtin.git:
repo: "git@forge.lefuturiste.fr:mbess/snippets.git"
@ -332,3 +373,7 @@
repo: "git@forge.lefuturiste.fr:mbess/monakhos.git"
dest: /home/mbess/workspace/monakhos
- name: Setup OpenFortiVPN
when: 'profile == "pro"'
include_role:
name: openfortivpn